A method for access network signaling protocol interworking for user authentication includes receiving, from a node in an access network, a message formatted according to a signaling protocol of the access network and containing an authentication payload formatted according to an authentication protocol. The method further includes, in response to receiving the message, formulating a message formatted according to a signaling protocol of a cellular network, the message including the authentication payload formatted according to the authentication protocol. The method further includes forwarding the message formatted according to the signaling protocol of the cellular network to a node in the cellular network that implements the authentication protocol, the message including the authentication payload formatted according to the authentication protocol.
Legal claims defining the scope of protection. Each claim is shown in both the original legal language and a plain English translation.
1. A method for access network signaling protocol interworking for user authentication, the method comprising: in a Diameter signaling router (DSR) including at least one message processor: receiving, from a broadband network gateway (BNG) in an access network, a first message formatted according to a signaling protocol of the access network and containing an authentication payload formatted according to an authentication protocol, wherein the signaling protocol of the access network comprises a remote authentication dial in user service (RADIUS) protocol and the first message comprises a RADIUS access request message carrying an extensible authentication protocol (EAP) payload; in response to receiving the first message, formulating a second message formatted according to a signaling protocol of a cellular network, the second message including the authentication payload formatted according to the authentication protocol, wherein the signaling protocol of the cellular network comprises a Diameter protocol and the second message comprises a Diameter EAP request (DER) message carrying the EAP payload; forwarding the second message formatted according to the signaling protocol of the cellular network to an authentication, authorization, and accounting (AAA) server in the cellular network that implements the authentication protocol, the second message including the authentication payload formatted according to the authentication protocol; and receiving, from the AAA server and in response to the DER message, a Diameter EAP answer (DEA) message.
A Diameter signaling router (DSR) facilitates user authentication between an access network and a cellular network. The DSR receives a RADIUS access request message from a broadband network gateway (BNG) in the access network. This message contains an Extensible Authentication Protocol (EAP) payload for user authentication. The DSR then formulates a Diameter EAP request (DER) message, including the same EAP payload, and forwards it to an authentication, authorization, and accounting (AAA) server in the cellular network. Finally, the DSR receives a Diameter EAP answer (DEA) message from the AAA server, completing the authentication process. The DSR effectively translates between RADIUS and Diameter protocols to enable seamless user authentication across different network types.
2. The method of claim 1 wherein the Diameter protocol comprises a Diameter SWa protocol.
The method for access network signaling protocol interworking for user authentication, where a Diameter signaling router (DSR) receives a RADIUS access request message with an EAP payload from a broadband network gateway (BNG), formulates a Diameter EAP request (DER) message, forwards it to an AAA server, and receives a Diameter EAP answer (DEA) message, uses a Diameter SWa protocol in the cellular network for communication between the DSR and the AAA server. The Diameter SWa protocol provides specific functionalities and message formats optimized for authentication, authorization, and accounting procedures in mobile networks.
3. The method of claim 1 wherein the Diameter protocol comprises a Diameter STa protocol.
The method for access network signaling protocol interworking for user authentication, where a Diameter signaling router (DSR) receives a RADIUS access request message with an EAP payload from a broadband network gateway (BNG), formulates a Diameter EAP request (DER) message, forwards it to an AAA server, and receives a Diameter EAP answer (DEA) message, uses a Diameter STa protocol in the cellular network for communication between the DSR and the AAA server. The Diameter STa protocol provides specific functionalities and message formats optimized for authentication, authorization, and accounting procedures related to WLAN interworking.
4. The method of claim 1 wherein the node in the access network comprises a RADIUS client that receives an authentication request from a user device.
The method for access network signaling protocol interworking for user authentication, where a Diameter signaling router (DSR) receives a RADIUS access request message with an EAP payload from a broadband network gateway (BNG), formulates a Diameter EAP request (DER) message, forwards it to an AAA server, and receives a Diameter EAP answer (DEA) message, involves the BNG acting as a RADIUS client. This RADIUS client receives an initial authentication request directly from a user device attempting to access the network. The BNG then encapsulates this request in a RADIUS access request message and forwards it to the DSR for protocol interworking.
5. The method of claim 1 wherein the authentication protocol is implemented end to end between the node in the access network and the node in the cellular network.
The method for access network signaling protocol interworking for user authentication, where a Diameter signaling router (DSR) receives a RADIUS access request message with an EAP payload from a broadband network gateway (BNG), formulates a Diameter EAP request (DER) message, forwards it to an AAA server, and receives a Diameter EAP answer (DEA) message, ensures that the underlying authentication protocol (EAP) is implemented end-to-end. This means that the BNG in the access network and the AAA server in the cellular network directly communicate using EAP, and the DSR simply transports the EAP payload between the two networks without interpreting or modifying it.
6. The method of claim 5 wherein the Diameter signaling router is stateless with respect to the authentication protocol.
In the method described, where the EAP authentication protocol is implemented end-to-end between the access network and the cellular network, the Diameter signaling router (DSR) operates in a stateless manner with respect to the EAP protocol. The DSR does not maintain any session state or context related to the EAP authentication process. It simply forwards the EAP payload between the RADIUS and Diameter messages, allowing the BNG and AAA server to handle the authentication logic. This simplifies the DSR design and improves its scalability.
7. A system for access network signaling protocol interworking for user authentication, the system comprising: a Diameter signaling router (DSR) including at least one message processor: an interworking function in the DSR and implemented by the at least one processor for receiving, from a broadband network gateway (BNG) in an access network, a first message formatted according to a signaling protocol of the access network and containing an authentication payload formatted according to an authentication protocol, wherein the signaling protocol of the access network comprises a remote authentication dial in user service (RADIUS) protocol and the first message comprises a RADIUS access request message carrying an extensible authentication protocol (EAP) payload, for, in response to receiving the first message, formulating a second message formatted according to a signaling protocol of a cellular network, the second message including the authentication payload formatted according to the authentication protocol, for forwarding the second message formatted according to the signaling protocol of the cellular network to an authentication, authorization, and accounting (AAA) server in the cellular network that implements the authentication protocol, the second message including the authentication payload formatted according to the authentication protocol, wherein the signaling protocol of the cellular network comprises a Diameter protocol, and the second message comprises a Diameter EAP request message carrying the EAP payload, and for receiving, from the AAA server and in response to the Diameter EAP request message, a Diameter EAP answer (DEA) message.
A system for user authentication across different networks uses a Diameter signaling router (DSR) that includes an interworking function. This function receives a RADIUS access request message with an EAP payload from a broadband network gateway (BNG). It then formulates a Diameter EAP request (DER) message with the same EAP payload and forwards it to an authentication, authorization, and accounting (AAA) server. Upon receiving a Diameter EAP answer (DEA) message from the AAA server, the authentication process is complete. The DSR acts as a protocol translator, enabling seamless authentication between RADIUS-based access networks and Diameter-based cellular networks.
8. The system of claim 7 wherein the Diameter protocol comprises a Diameter SWa protocol.
The system for access network signaling protocol interworking, where a Diameter signaling router (DSR) receives a RADIUS message, converts it to a Diameter message, forwards it to an AAA server, and receives a response, utilizes a Diameter SWa protocol in the cellular network for communication between the DSR and the AAA server. The Diameter SWa protocol provides specific functionalities and message formats optimized for authentication, authorization, and accounting procedures in mobile networks.
9. The system of claim 7 wherein the Diameter protocol comprises a Diameter STa protocol.
The system for access network signaling protocol interworking, where a Diameter signaling router (DSR) receives a RADIUS message, converts it to a Diameter message, forwards it to an AAA server, and receives a response, utilizes a Diameter STa protocol in the cellular network for communication between the DSR and the AAA server. The Diameter STa protocol provides specific functionalities and message formats optimized for authentication, authorization, and accounting procedures related to WLAN interworking.
10. The system of claim 7 wherein the node in the access network comprises a remote RADIUS client that receives an authentication request from a user device.
The system for access network signaling protocol interworking, where a Diameter signaling router (DSR) receives a RADIUS message, converts it to a Diameter message, forwards it to an AAA server, and receives a response, includes a BNG that functions as a RADIUS client. This RADIUS client receives the initial authentication request directly from a user device. The BNG then encapsulates this request in a RADIUS access request message for forwarding to the DSR.
11. The system of claim 7 wherein the authentication protocol is implemented end to end between the node in the access network and the node in the cellular network.
The system for access network signaling protocol interworking, where a Diameter signaling router (DSR) receives a RADIUS message, converts it to a Diameter message, forwards it to an AAA server, and receives a response, ensures that the EAP authentication protocol operates end-to-end between the BNG in the access network and the AAA server in the cellular network. The DSR simply relays the EAP payload without processing or interpreting it, preserving the integrity of the authentication process.
12. The system of claim 11 wherein the Diameter signaling router is stateless with respect to the authentication protocol.
In the system described, where the EAP authentication protocol is implemented end-to-end between the access network and the cellular network, the Diameter signaling router (DSR) remains stateless with respect to the EAP protocol. The DSR doesn't store any EAP session information, focusing solely on message format conversion and routing. This minimizes complexity and improves the scalability of the DSR.
13. A non-transitory computer readable medium having stored thereon executable instructions that when executed by the processor on a computer control the computer to perform steps comprising: in a Diameter signaling router (DSR) including at least one message processor: receiving, from a broadband network gateway (BNG) in an access network, a first message formatted according to a signaling protocol of the access network and containing an authentication payload formatted according to an authentication protocol, wherein the signaling protocol of the access network comprises a remote authentication dial in user service (RADIUS) protocol and the first message comprises a RADIUS access request message carrying an extensible authentication protocol (EAP) payload; in response to receiving the first message, formulating a second message formatted according to a signaling protocol of a cellular network, the second message including the authentication payload formatted according to the authentication protocol, wherein the signaling protocol of the cellular network comprises a Diameter protocol and the second message comprises a Diameter EAP request message carrying the EAP payload; forwarding the second message formatted according to the signaling protocol of the cellular network to an authentication, authorization, and accounting (AAA) server in the cellular network that implements the authentication protocol, the second message including the authentication payload formatted according to the authentication protocol; and receiving, from the AAA server and in response to the DER message, a Diameter EAP answer (DEA) message.
A computer-readable medium stores instructions that, when executed, enable user authentication across different networks. These instructions cause a Diameter signaling router (DSR) to receive a RADIUS access request message with an EAP payload from a broadband network gateway (BNG). The DSR formulates a Diameter EAP request (DER) message with the EAP payload and sends it to an AAA server. The DSR then receives a Diameter EAP answer (DEA) message from the AAA server. This process allows the DSR to function as a protocol translator, facilitating authentication between RADIUS and Diameter networks.
Cooperative Patent Classification codes for this invention. Click any code to explore related patents in that topic.
August 14, 2015
May 30, 2017
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.